ch.qos.logback:logback-access (0.5), ch.qos.logback:logback-classic (0.5) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.5)

ch.qos.logback:logback-core MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.5 - ch.qos.logback:logback-classic 0.5 Source cves: CVE-2017-5929 Source...

ch.qos.logback:logback-access (0.9.16), ch.qos.logback:logback-classic (0.9.16) +12 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.16)

ch.qos.logback:logback-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.16 - ch.qos.logback:logback-classic 0.9.16 -...

ch.qos.logback:log4j-bridge (0.9.4), ch.qos.logback:logback-examples (0.9.4) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.4)

ch.qos.logback:logback-classic MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.4 - ch.qos.logback:logback-examples 0.9.4 Source cves: CVE-2017-592...

ch.qos.logback:logback-examples (0.9.13) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.13)

ch.qos.logback:logback-classic MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.13 Source cves: CVE-2017-5929 Source advisory:...

ch.qos.logback:logback-access (0.9.14), ch.qos.logback:logback-classic (0.9.14) +13 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.14)

ch.qos.logback:logback-core MAVEN version 0.9.14 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.14 - ch.qos.logback:logback-classic 0.9.14 -...

ch.qos.logback:logback-access (>=${parent.version}, <=0.2.5), ch.qos.logback:logback-classic (0.2.5) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.2.5)

ch.qos.logback:logback-core MAVEN version 0.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access =$parent.version, =0.2.5 - ch.qos.logback:logback-classic 0.2.5 Source cves...

ch.qos.logback:logback-examples (0.9.26), com.axibase:aggregation-log-filter (>=0.1.1, <=0.4.13) +118 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.26)

ch.qos.logback:logback-classic MAVEN version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.26 - com.axibase:aggregation-log-filter =0.1.1, =1.0.3, =0.3.1...

ch.qos.logback:logback-examples (0.9.10) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.10)

ch.qos.logback:logback-classic MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.10 Source cves: CVE-2017-5929 Source advisory:...

ch.qos.logback:logback-access (0.9.9), ch.qos.logback:logback-classic (0.9.9) +40 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.9)

ch.qos.logback:logback-core MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.9 - ch.qos.logback:logback-classic 0.9.9 -...

GHSA-VMFG-RJJM-RJRJ QOS.ch Logback vulnerable to Deserialization of Untrusted Data

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components. The RemoteStreamAppenderClient class in logback-classic and the SocketNode classes in logback-classic and logback-access allow data to be deserialized over a Java Socket,...

ch.qos.logback:logback-access (0.9.10), ch.qos.logback:logback-classic (0.9.10) +1 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.10)

ch.qos.logback:logback-core MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.10 - ch.qos.logback:logback-classic 0.9.10 -...

ch.qos.logback:logback-examples (0.9.28), com.github.q742972035.mysql.binlog:dispatch (>=0.0.0.2-snapshots, <=0.0.0.3-snapshots) +114 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.28)

ch.qos.logback:logback-classic MAVEN version 0.9.28 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.28 - com.github.q742972035.mysql.binlog:dispatch...

ch.qos.logback:logback-access (0.9.13), ch.qos.logback:logback-classic (0.9.13) +1 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.13)

ch.qos.logback:logback-core MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.13 - ch.qos.logback:logback-classic 0.9.13 -...

ch.qos.logback:log4j-bridge (0.9.1), ch.qos.logback:logback-examples (0.9.1) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.1)

ch.qos.logback:logback-classic MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.1 - ch.qos.logback:logback-examples 0.9.1 Source cves: CVE-2017-592...

ch.qos.logback:logback-examples (0.9.11), org.coosproject.examples:ping-impl (>=1.0.0, <=1.3.1) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.11)

ch.qos.logback:logback-classic MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.11 - org.coosproject.examples:ping-impl =1.0.0, =1.3.1 Source...

ch.qos.logback:logback-access (0.9.20), ch.qos.logback:logback-classic (0.9.20) +25 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.20)

ch.qos.logback:logback-core MAVEN version 0.9.20 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.20 - ch.qos.logback:logback-classic 0.9.20 -...

ch.qos.logback:logback-examples (0.9.22) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.22)

ch.qos.logback:logback-classic MAVEN version 0.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.22 Source cves: CVE-2017-5929 Source advisory:...

ch.qos.logback:logback-access (0.9.19), ch.qos.logback:logback-classic (0.9.19) +17 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.19)

ch.qos.logback:logback-core MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.19 - ch.qos.logback:logback-classic 0.9.19 -...

ch.qos.logback:logback-examples (0.9.16), de.huxhorn.lilith:de.huxhorn.lilith (0.9.36) +7 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.16)

ch.qos.logback:logback-classic MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.16 - de.huxhorn.lilith:de.huxhorn.lilith 0.9.36 -...

aero.champ:cargojson (1.0), ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12) +16504 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (>=1.0.0, <=1.1.11)

ch.qos.logback:logback-classic MAVEN version =1.0.0, =0.1.8, =0.1.6, =0.1.4-sb1x, =0.11.0, =0.7.0, =0.6.1, =0.11.0, =0.6.1, =0.13.0 and more Source cves: CVE-2017-5929 Source advisory: OSV:GHSA-VMFG-RJJM-RJRJ...